IP Address: 192.99.243.159Previously Malicious
Browse or download a weekly review of our cyber threat intelligence data and gain more insight to help protect your network
IP Address:
192.99.243.159
Previously Malicious
This IP address attempted an attack on a machine protected by Guardicore Centra
Role |
Attacker |
Services Targeted |
HTTP |
Tags |
IDS - Potential Corporate Privacy Violation Malicious File HTTP Outgoing Connection Inbound HTTP Request |
Connect Back Servers |
52.173.91.30 40.76.78.149 13.67.213.103 52.176.51.246 40.114.42.64 45.55.166.65 13.92.114.106 |
IP Address |
192.99.243.159 |
|
Domain |
- |
|
ISP |
OVH Hosting |
|
Country |
Canada |
|
WHOIS |
Created Date |
- |
Updated Date |
- |
|
Organization |
- |
First seen in Guardicore Centra |
2017-02-18 |
Last seen in Guardicore Centra |
2017-02-18 |
What is Guardicore CentraGuardicore Centra is a data center and cloud security solution that protects the organization's core assets, using flexible, quickly deployed and easy to understand micro-segmentation controls. Centra generates in-context security incidents, with details on attacker tools and techniques, that help IR teams prioritize incident investigation and reduce dwell time. Learn More
IDS detected Potential Corporate Privacy Violation : Unsupported/Fake Internet Explorer Version MSIE 5. |
IDS - Potential Corporate Privacy Violation |
An inbound HTTP request was made to http://52.173.91.30/phpMyAdmin/scripts/setup.php |
Inbound HTTP Request |
An inbound HTTP request was made to http://52.173.91.30/phpmyadmin/scripts/setup.php |
Inbound HTTP Request |
An inbound HTTP request was made to http://52.173.91.30/myadmin/scripts/setup.php |
Inbound HTTP Request |
An inbound HTTP request was made to http://52.173.91.30/pma/scripts/setup.php |
Inbound HTTP Request |
Process /usr/local/apache2/bin/httpd generated outgoing network traffic to: 45.55.166.65:21 |
Outgoing Connection |
/tmp/sess_5d89782275aee56ebde104fc4bbc03e214d6c21c was identified as malicious by YARA according to rules: Url, Crypto Signatures and Crypto Index |
Malicious File |
/tmp/sess_b5cd285c571147490ffa3f04e395d5fd76e014c5 was identified as malicious by YARA according to rules: Url, Crypto Signatures and Crypto Index |
Malicious File |
/tmp/sess_207b99918e41f4c55aff37427693a6b422519e51 was identified as malicious by YARA according to rules: Url, Crypto Signatures and Crypto Index |
Malicious File |
/tmp/sess_2c0150a5de44259c55dda6ee5d54c2345a0faa61 was identified as malicious by YARA according to rules: Url, Crypto Signatures and Crypto Index |
Malicious File |
IP Address: 192.99.243.159Previously Malicious